Security Engineer

Leidos•Ashburn, VA

3d•Onsite

About The Position

The Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible for preventing, identifying, containing, and eradicating cyber threats to CBP networks. This involves monitoring, intrusion detection, and protective security services for CBP information systems, including LAN/WAN, public-facing websites, wireless, mobile/cellular, cloud environments, security devices, servers, and workstations. The CBP SOC is accountable for the overall security of CBP Enterprise-wide information systems and investigates and reports any suspected and confirmed security violations.

Requirements

2-4 years’ experience in Systems Engineer/Admin role or an equivalent of 2-4 years in Cybersecurity.
Hands-on experience on AWS (EC2, Storage, Lambda, S3, VPC, Storage Gateways).
Hands-on experience with Linux (CentOS, Amazon Linux 2, RHEL, Kali Linux, Rocky Linux), including patching and updating.
Knowledge/experience with Windows, including setup, building using images, and locating logs and data.
Mid to high-level troubleshooting skills, including identifying logs and errors within applications and OS’s.
Knowledge and understanding of Networking (VPNs, DNS, DHCP, AWS VPCs, Firewalls) and how it all ties together.
Knowledge/experience with automation software such as Ansible, Windows SCCM, or any automation software.
Understanding of cybersecurity processes and protocols.
Knowledge and understanding of Antivirus software (e.g., McAfee, CrowdStrike) and HIPS software.
Understanding of SOPs, Playbooks, and experience in creating documentation.
Knowledge with platform hardening.
Bachelor's degree in computer science, Engineering, Software Development, Information Technology, Cyber Security, or related field, OR equivalent relevant work experience.
Familiarity with the management, operational, and technical aspects of IT Security in a complex enterprise environment.
Knowledge and familiarity with in-depth analysis of Zero Trust Capabilities, Infrastructures and Architecture.
Must have US Citizenship.
Must be able to commute to the Ashburn VA office location.
Must favorably pass a 5-year (BI) Background Investigation.

Nice To Haves

Ability to learn and support new systems and applications.
Redhat, Cisco or Microsoft certifications.
Security+, Linux+, or Network+ certifications.
Cisco Hardware and Storage Expertise.
Networking, Linux and Windows expertise.
Sourcefire (snort) or RSA Security Analytics (network) experience.
Ability to script in one or more of the following computer languages: Python, Bash, Visual Basic or Powershell.

Responsibilities

Support the full system engineering life-cycle, including requirements analysis, design, development, test, implementation, maintenance, integration, and documentation of SOC infrastructure and SOC tool suite.
Install, configure, monitor, and troubleshoot network security solutions and related monitoring tools, including L2/L3 network security devices, IDS/IPS, Full packet capture, DLP, Endpoint (AV, DLP, Endpoint Detection & Response), and infrastructure supporting SEIM (Splunk).
Create and maintain LAN/WAN security standards and design documentation.
Secure AWS environments, automate controls, and support enterprise security operations.
Script in one or more of the following computer languages: Python, Bash, Visual Basic, or Powershell.
Communicate effectively with team members, management, and customers.